Dahua Imou Ranger2 HWID=IPC-A22P-S2 recovery - dump memory

bonti

n3wb
Joined
Jun 21, 2015
Messages
2
Reaction score
1
In case you have a cheap ptz camera Dahua Imou Ranger2 HWID=IPC-A22P-S2, (HWID=IPC-A22P-S2:01:02:08:77:37:00:01:10:01:01:04:384:00:02:00:00:00:01:00:00:40) broken firmware, I made a memory dump. You need skils for desoldering SIP, mine was Winbond 25Q64, a cheap programmer CH341 , and a Hex editor (HxD for example). First you have to desolder memory chip from mainboard,20220923_121428.jpg
then solder to programmer board.
Install hex editor and search for "wifi"
You have to change :
wifiaddr=A0:BD:1D:BA:55:55
ethaddr=A0:BD:1D:BA:55:55
ID=5J086BCPAJ99999
SC=L24FA555
The ID, aka S/N is written on the back of the camera, also SC, security codeimou IPCA22.jpg
Wifi and ethernet address can be read from memory chip before writing dump (if the camera was not totally dead, or that part of memory not affected )
Otherwise, imagine some mac address randomly.
The serial is important for cloud access , not conflicting with other camera . Security code is important if you want to access camera via SmartPSS on PC. You need credentials admin&security code.
Screenshots:binfile parameters.jpgbinfile parameterss.jpg
Careful editing,one character at the time. I altered my own dump with red color,to see where you have to edit .
Save the dump after editing and solder chip on the camera mainboard.
Do a full reset and enjoy.
 

Attachments

Top